Lucy Pegler Director

Lucy is a director specialising in technology, data protection and cyber security. She has in-depth sector experience and frequently advises clients operating in the transport, infrastructure and public sectors. Her experience ranges from advising on international, multi-party technology outsourcings through to advising on the handling of enforcement action by the UK's Information Commissioner. 

Lucy was recently recognised as a ‘Next Generation Lawyer’ for IT and Telecoms by Legal 500 and was noted for her data protection expertise. Lucy is a member of Intelligent Transport Systems (UK), Women in ITS, the Innovation Network and a South West committee member (and chair from Autumn 2018) for the Society for Computers and Law (SCL).

She regularly speaks at events on issues relating to technology, data protection and cyber security. Lucy is closely involved in the development of legal solutions for Connected and Autonomous Vehicles (including driverless cars).

• Working as part of the FLOURISH and Capri driverless car trials based in Bristol and South Gloucestershire, in particular in relation to (1) the standards for data sharing and cyber security, and recommendations for changes and/or clarifications to data protection legislation to support the successful adoption (including user acceptance) of connected and autonomous vehicles on UK roads, and (2) changes to regulations to enable the deployment of pods on pavements and in dual-mode utilising pavements and public roads.
• Advising Train Operating Companies on arrangements for smart ticketing for smart ticketing across their rail network including on issues such as interoperability, dependencies, recovery of OPEX and funding mechanisms. 
• Advising Train Operating Companies on GDPR compliance programmes including the preparation of internal and externally facing policies; supplier contracts; marketing and communications.
• Lead associate advising on Coca-Cola Hellenic's pan-European outsourcing of data centre services including preparation of the RFP contract template, performance regime and leading parallel negotiations with three bidders in three different countries.
• Advising on the transformation of business critical IT services for Coca-Cola Hellenic, covering application development and application maintenance throughout Europe and Russia. 
• Advising in relation to an ICO investigation and enforcement action for a private client in relation to a breach of the Data Protection Act 1998 and the Privacy and Electronic Communications Regulation including successfully reducing the monetary penalty issued by the ICO against our client. 
• Advising on Royal London's (UK's largest mutual life and pensions company) IT infrastructure outsourcing to Steria.
• Advising VISA Europe on its implementation of new HR SaaS platform across 42 countries.